added models for legacy permissions; added auth and permission checks to group pages